Outbound interceptor flow for logout propagation messages

[Bachl, Mathias]

Hello!

As far as I understood the code in saml2-logoutprop-flow.xml correctly, outbound interceptor flows defined for the SAML2.Logout profile are not applied to outgoing logout propagation messages. Can somebody confirm that?

Would it be desirable to include processing of the outbound interceptor flows in the saml2-logoutprop-flow.xml, or is there any reason it has been implemented without them?

Background info:
We currently have to deal with a special SP that requires customization of the SLO propagation messages. As I didn't manage to use outbound interceptor flows to achieve this, I configured a customized version of the saml2-logoutprop-flow.xml, which should be avoided as far as I remember the docs correctly.

Thanks in advance and best regards,
Mathias
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20210806/1d48ab66/attachment.htm>